CVE-2025-52655: HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.
Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HCL MyXalyticsto a version that resolves this vulnerability.Fixed in 6.7
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52655?
CVE-2025-52655 is a high-severity vulnerability due to the potential for untrusted third-party scripts to execute within the application's context.
How do I fix CVE-2025-52655?
To fix CVE-2025-52655, ensure that all third-party scripts are loaded with integrity checks and validation to prevent unauthorized code execution.
What are the risks associated with CVE-2025-52655?
CVE-2025-52655 poses risks such as data exposure and unauthorized access due to external code being executed within the application.
Who is affected by CVE-2025-52655?
HCL MyXalytics versions 6.6 are affected by CVE-2025-52655, allowing third-party scripts to load without appropriate security measures.
What can happen if CVE-2025-52655 is exploited?
If CVE-2025-52655 is exploited, attackers can execute malicious code in the application's context, potentially leading to data breaches and loss of integrity.